Lucene search
+L

225934 matches found

EUVD
EUVD
added 2026/08/23 9:15 a.m.4 views

EUVD-2026-64647

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

6.5CVSS6.5AI score
SaveExploits0References6
CVE
CVE
added 2026/08/23 9:15 a.m.5 views

CVE-2026-78112

A SQL injection vulnerability exists in itsourcecode Hospital Management System Project in PHP 1.0 , specifically in the file /viewservicetype.php through manipulation of the delid parameter. The flaw can be exploited remotely and requires low privileges (authenticated access). CVSS 3.1 scores it...

6.5CVSS6.5AI score
SaveExploits0References6
CVE
CVE
added 2026/08/23 4:30 a.m.14 views

CVE-2026-78063

A command injection vulnerability exists in Tenda CH22 firmware version 1.0.0.1 . The flaw is in the function formeditFileName within the file /goform/editFileName , where manipulation of the editNameMit argument allows an authenticated remote attacker to inject and execute arbitrary commands. Th...

7.4CVSS7.5AI score
SaveExploits0References6
EUVD
EUVD
added 2026/08/23 4:30 a.m.9 views

EUVD-2026-64632

A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the...

7.4CVSS7.5AI score
SaveExploits0References6
CVE
CVE
added 2026/08/23 3:30 a.m.13 views

CVE-2026-78060

A cross-site scripting (XSS) vulnerability exists in SourceCodester Stock Management System 1.0 in the file /php_action/getOrderReport.php. Manipulating the clientName or clientContact arguments allows remote, unauthenticated attackers to inject malicious scripts, resulting in a low integrity imp...

5.3CVSS4AI score
SaveExploits0References6
EUVD
EUVD
added 2026/08/23 3:30 a.m.7 views

EUVD-2026-64625

A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /phpaction/getOrderReport.php. Performing a manipulation of the argument clientName/clientContact results in cross site scripting. It is possible to initiate the attack...

5.3CVSS4AI score
SaveExploits0References6
EUVD
EUVD
added 2026/08/23 2:45 a.m.5 views

EUVD-2026-64623

A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument rollno/name/fathername/class/mobile/email/password/remark causes sql injection...

6.5CVSS6.4AI score
SaveExploits0References6
CVE
CVE
added 2026/08/23 2:45 a.m.13 views

CVE-2026-78057

sambitraj Student-Management-System (up to commit 56ba287) is vulnerable to SQL injection in the Management Mutation Handler component. Manipulating the arguments roll_no, name, father_name, class, mobile, email, password, or remark allows a remote, authenticated attacker to inject SQL queries. T...

6.5CVSS6.4AI score
SaveExploits0References6
EUVD
EUVD
added 2026/08/23 2:30 a.m.5 views

EUVD-2026-64621

A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is some unknown functionality of the component Dashboard. The manipulation of the argument rollno/teachername results in sql injection. The attack can be...

6.5CVSS6.5AI score
SaveExploits0References6
CVE
CVE
added 2026/08/23 2:30 a.m.11 views

CVE-2026-78056

sambitraj Student-Management-System (up to commit 56ba287) contains a SQL injection vulnerability in the Dashboard component. Manipulation of the roll_no or teacher_name argument allows a remote, authenticated attacker to inject SQL queries. The exploit is public and classified as proof-of-concep...

6.5CVSS6.5AI score
SaveExploits0References6
EUVD
EUVD
added 2026/08/23 12:30 a.m.9 views

EUVD-2026-64604

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub41AD7C of the file /cgi-bin/mbox-config?method=SET&section=ntptimezone of the component Web Management. The manipulation of the argument timestr/ntpclientenabled results in stack-based buffer overflow. I...

9.9CVSS6.2AI score
SaveExploits0References6
EUVD
EUVD
added 2026/08/23 12:30 a.m.8 views

EUVD-2026-64615

A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /BSIS1.php. Executing a manipulation of the argument course can lead to cross site scripting. The attack may be launched remotely. The exploit has been made availabl...

5.3CVSS4AI score
SaveExploits0References6
CVE
CVE
added 2026/08/23 12:30 a.m.12 views

CVE-2026-78054

SourceCodester Class and Exam Timetabling System 1.0 contains a Cross-Site Scripting (XSS) vulnerability in the file /BSIS1.php . The flaw is triggered by manipulating the course parameter, allowing a remote, unauthenticated attacker to inject malicious scripts into the application. User interact...

5.3CVSS3.8AI score
SaveExploits0References6
CVE
CVE
added 2026/08/22 11:15 p.m.27 views

CVE-2026-78050

CVE-2026-78050 is a stack-based buffer overflow in the Web Management component of Comfast CF-N1-S firmware 2.6.0.1 . The vulnerable function sub_41AD7C is reachable via the CGI endpoint /cgi-bin/mbox-config?method=SET&section=ntp_timezone. Manipulating the timestr or ntp_client_enabled argument ...

9.9CVSS9.5AI score
SaveExploits0References5
Nuclei
Nuclei
added 2026/08/22 12:19 p.m.58 views

Joomla! Cmimarketplace 0.1 - Local File Inclusion

Joomla! Cmimarketplace 0.1 is susceptible to local file inclusion because comcmimarketplace allows remote attackers to list arbitrary directories via a .. dot dot in the viewit parameter to index.php. id: CVE-2009-1496 info: name: Joomla! Cmimarketplace 0.1 - Local File Inclusion author: daffainf...

5CVSS5.5AI score0.07183EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/22 12:19 p.m.700 views

FUEL CMS 1.4.1 - Remote Code Execution

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. id: CVE-2018-16763 info: name: FUEL CMS 1.4.1 - Remote Code Execution author: pikpikcu severity: critical description: FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/...

9.8CVSS8.8AI score0.82937EPSS
SaveExploits19References5
Nuclei
Nuclei
added 2026/08/22 12:19 p.m.51 views

Joomla! Component com_biblestudy - Local File Inclusion

A directory traversal vulnerability in the Bible Study combiblestudy component 6.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter in a studieslist action to index.php. id: CVE-2010-0157 info: name: Joomla! Component...

7.5CVSS5.7AI score0.12969EPSS
SaveExploits2References4
Nuclei
Nuclei
added 2026/08/22 12:19 p.m.63 views

Joomla! Component com_rokdownloads - Local File Inclusion

A directory traversal vulnerability in the RokDownloads comrokdownloads component before 1.0.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1056 info: name: Joomla! Component comrokdownload...

6.8CVSS5.7AI score0.11414EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/22 12:19 p.m.36 views

Joomla! Component Horoscope 1.5.0 - Local File Inclusion

A directory traversal vulnerability in the Daily Horoscope comhoroscope component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1472 info: name: Joomla! Component Horoscope 1.5.0 - Local File Inclusion...

7.5CVSS5.6AI score0.13351EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/08/22 12:19 p.m.46 views

Joomla! Component AlphaUserPoints 1.5.5 - Local File Inclusion

A directory traversal vulnerability in the AlphaUserPoints comalphauserpoints component 1.5.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the view parameter to index.php. id: CVE-2010-1476 info: name: Joomla! Componen...

6.8CVSS5.8AI score0.0994EPSS
SaveExploits2References5
Rows per page
Query Builder